CVE-2006-0355

HomeFtp 1.1 - Denial of Service via Long USER and PASS Commands

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-0355. PoCs published by pi3ch.

AI-analyzed exploit summary This exploit triggers a denial of service in HomeFTP v1.1 by sending a malformed FTP command sequence. It establishes a connection, sends a crafted USER/PASS/NLST payload, and crashes the server.

Description

Helmsman Research (aka CoolUtils) HomeFtp 1.1 allows remote attackers to cause an unspecified denial of service via a long USER command combined with a long PASS command and an NLST command.

Exploits (1)

exploitdb WORKING POC VERIFIED
by pi3ch · cdoswindows
https://www.exploit-db.com/exploits/1416

This exploit triggers a denial of service in HomeFTP v1.1 by sending a malformed FTP command sequence. It establishes a connection, sends a crafted USER/PASS/NLST payload, and crashes the server.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: HomeFTP <= v1.1
No auth needed
Prerequisites: network access to the FTP server · FTP port (21) open
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/24152
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/421869/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/16238
Exploit, Vendor Advisory x_refsource_misc
http://www.kapda.ir/advisory-202.html
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/350

Scores

EPSS 0.0306
EPSS Percentile 85.9%

Details

Status published
Products (1)
helmsman_research/homeftp 1.1
Published Jan 22, 2006
Tracked Since Feb 18, 2026